Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/AUDMpjmCaKaksbx4oZ86HO931ng.roa
File: AUDMpjmCaKaksbx4oZ86HO931ng.roa (raw, json)
Hash identifier: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=
Subject key identifier: 01:40:CC:A6:39:82:68:A6:A4:B1:BC:78:A1:9F:3A:1C:EF:77:D6:78
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019425FDEBB00662E1BF9A75553CD7883DDB
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/AUDMpjmCaKaksbx4oZ86HO931ng.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5610
IP address blocks: 193.17.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:eb:b0:06:62:e1:bf:9a:75:55:3c:d7:88:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0140cca6398268a6a4b1bc78a19f3a1cef77d678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:30:79:b5:55:a6:38:31:73:a9:ac:fc:dc:
f1:65:56:7e:18:78:61:bf:d7:6d:43:d8:fc:c1:c8:
05:73:e3:1f:ae:a9:3c:42:2e:1c:80:4d:42:0a:e5:
3a:b1:c6:a9:7b:c4:91:27:ed:73:16:4c:74:16:67:
67:15:46:64:fa:7e:e8:e9:25:b7:e2:1e:fe:7b:23:
1b:b5:46:88:a1:68:53:ad:de:f2:0f:fb:ed:aa:f9:
02:88:a6:98:0d:27:32:25:e4:d0:2b:f5:9e:39:01:
c6:a2:6a:b7:3c:46:80:35:ef:12:ce:ec:fa:0f:e0:
6b:b0:69:d9:ce:0d:6c:7f:56:35:38:cd:7c:f3:3f:
cd:93:4c:20:a8:3b:7c:30:1d:5c:a6:47:30:bb:42:
bd:67:c3:6e:5c:53:76:8e:ed:d8:3b:81:c2:32:fd:
67:12:4d:6c:bb:ce:19:2f:e3:60:9d:c0:6f:42:8c:
91:e3:f4:19:07:ee:10:c6:3c:59:13:04:b5:0e:65:
0a:f5:99:5a:07:d7:a5:bf:b3:7e:4b:be:bb:1c:86:
08:89:d0:df:83:c3:c3:c4:6b:09:3f:ba:97:0a:c4:
08:8e:55:ae:d1:66:2d:79:35:e1:04:b8:a6:64:38:
b9:31:1b:18:b7:5a:31:2b:cd:de:30:1f:9a:71:d5:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:CC:A6:39:82:68:A6:A4:B1:BC:78:A1:9F:3A:1C:EF:77:D6:78
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/AUDMpjmCaKaksbx4oZ86HO931ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2d:24:f2:35:e6:08:65:31:ad:3a:fc:92:d9:31:ad:16:95:
4d:e5:0f:db:b8:20:b6:0b:09:b6:95:43:71:7e:7d:1c:a8:4f:
db:50:f4:f6:f6:9d:64:8c:9b:8d:74:4d:2e:9a:b9:f2:34:b1:
7c:51:d2:6d:b9:c3:6a:9e:8a:00:f6:e0:0c:15:71:47:78:82:
4a:a8:b8:ce:a1:5e:e1:fa:20:05:6b:df:56:8b:c2:ae:f8:21:
37:f4:36:27:e8:e3:7e:56:8b:41:9d:8e:28:df:f2:62:6b:86:
24:b0:9e:c8:3e:6b:ea:81:d8:ac:0b:46:4d:56:10:b1:d5:5a:
cd:d3:5a:f3:9c:dd:b7:51:2d:b2:b9:fe:82:b5:01:d9:d3:71:
92:70:23:04:53:28:51:f7:7c:a7:58:18:e9:7e:0e:b9:46:b5:
8e:54:5f:84:a0:09:ec:a0:2b:80:c8:37:77:4a:d4:f6:7c:c5:
f0:39:cc:ab:fe:bb:35:1b:66:63:29:c3:62:c5:46:a4:89:ea:
c5:37:a8:91:f1:b3:7a:a0:68:c4:92:8c:bb:5f:ed:d1:a7:20:
77:9c:27:ec:55:21:a6:71:1c:f1:d2:a1:79:8f:25:fc:37:a0:
66:75:bd:cd:37:d3:27:d9:7f:07:d9:8c:9a:20:07:64:f7:ae:
8e:ef:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:43 2025 by rpki-client